$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: WsUOhYIStDUaezhphQhv1h8OgJoTBLjOAsHiU/b7wsw= Subject key identifier: 7B:B9:25:06:CC:34:81:49:F4:AB:23:93:B5:2C:51:09:35:CC:45:AC Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 018A Signing time: Sat 19 Jul 2025 03:42:15 +0000 Manifest this update: Sat 19 Jul 2025 03:42:15 +0000 Manifest next update: Sat 26 Jul 2025 03:42:15 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: h+XL1NXJX7ci4kKaUOC1j7MiQt7lh7x7bQmBi3CdxjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Jul 19 03:42:15 2025 GMT Not After : Jul 26 03:42:15 2025 GMT Subject: CN=687b1417-7386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:75:6c:bc:9f:9e:bf:80:7b:7a:be:1f:57: cc:59:a9:2c:0a:30:80:1a:84:22:61:cd:2d:79:04: 9a:71:d3:84:40:7b:1b:87:dd:9d:4c:3a:d5:c2:2e: 7e:b8:40:4e:f7:55:c9:be:53:9d:fa:be:5e:09:87: d6:2b:24:aa:af:5a:b4:c2:51:99:61:56:14:c3:11: bc:11:ce:a1:2a:6e:e0:0a:37:04:d4:28:8e:05:94: f1:7d:ec:13:d1:c8:d4:17:2b:06:7e:f1:95:59:ac: c1:e3:47:a8:9e:57:e7:a3:94:5c:6e:3d:ad:fe:b8: 71:e5:50:a2:1c:31:bf:ec:20:5e:6b:d1:f5:a0:2a: c7:00:2a:70:72:b6:8d:e3:b7:77:d0:16:20:9e:6f: d1:b2:00:4c:d1:0c:05:f3:5d:66:01:e0:a5:50:e8: ab:66:29:fa:f6:11:eb:6f:e4:33:10:ae:54:09:18: 2f:3e:b2:a0:b7:4a:62:9b:5c:d9:bd:49:ad:93:a9: 7f:f9:14:af:90:1f:a8:de:72:c3:89:e2:65:78:3c: 01:d6:23:7f:84:8a:c0:d1:81:2c:16:6a:87:04:26: 51:f8:78:84:82:25:12:44:67:2c:80:4c:6c:2e:b4: d6:89:98:55:c5:f9:bf:75:49:dd:30:b2:f2:c8:5d: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:25:06:CC:34:81:49:F4:AB:23:93:B5:2C:51:09:35:CC:45:AC X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c1:0a:ed:52:b9:ea:89:12:1e:91:70:47:5c:94:3b:2c:54: 25:68:1a:37:c2:bb:29:29:6b:70:85:ea:84:9a:23:e4:fc:c8: 35:18:e0:e9:67:84:ca:dc:53:d7:a8:03:c3:27:f8:e4:41:95: 2e:c7:28:e3:80:03:91:03:5f:03:a9:d3:c4:92:66:fb:0e:5f: 78:53:48:68:9b:a9:d7:60:07:c6:33:f6:ca:ee:29:a1:4b:dc: 11:9e:b7:56:a5:5c:93:b2:5f:f9:c8:26:ef:8e:18:f6:1b:68: b3:0a:68:2c:4e:b7:b2:f3:77:53:b4:7d:7f:6d:43:fa:09:19: 58:5b:ae:9c:6a:6b:80:28:75:6a:22:dd:cb:91:94:7c:81:a7: 46:22:c0:a0:9c:93:12:00:53:24:98:62:43:16:16:b4:c8:66: 14:3d:fd:92:76:d0:5e:3c:c2:a7:85:a9:91:f1:14:82:be:77: a0:5f:d9:3e:f7:2d:9f:25:b0:15:33:67:95:76:70:93:05:42: 3f:19:1f:1f:ec:b2:bf:e8:a7:f6:49:4c:69:c8:28:0b:2a:aa: 8f:c8:51:64:07:18:c4:bb:45:37:dd:44:66:eb:6a:a6:74:a5: 3f:2a:f4:0f:f0:c9:9d:cc:4d:93:e5:bf:80:d4:18:b9:6b:e5: 17:ad:01:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwNzE5MDM0MjE1WhcNMjUwNzI2MDM0MjE1WjAYMRYwFAYD VQQDEw02ODdiMTQxNy03Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUd1bLyfnr+Ae3q+H1fMWaksCjCAGoQiYc0teQSacdOEQHsbh92dTDrVwi5+ uEBO91XJvlOd+r5eCYfWKySqr1q0wlGZYVYUwxG8Ec6hKm7gCjcE1CiOBZTxfewT 0cjUFysGfvGVWazB40eonlfno5Rcbj2t/rhx5VCiHDG/7CBea9H1oCrHACpwcraN 47d30BYgnm/RsgBM0QwF811mAeClUOirZin69hHrb+QzEK5UCRgvPrKgt0pim1zZ vUmtk6l/+RSvkB+o3nLDieJleDwB1iN/hIrA0YEsFmqHBCZR+HiEgiUSRGcsgExs LrTWiZhVxfm/dUndMLLyyF0v8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu5JQbM NIFJ9Ksjk7UsUQk1zEWsMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuwQrtUrnqiRIekXBHXJQ7LFQlaBo3wrspKWtwheqEmiPk/Mg1GODp Z4TK3FPXqAPDJ/jkQZUuxyjjgAORA18DqdPEkmb7Dl94U0hom6nXYAfGM/bK7imh S9wRnrdWpVyTsl/5yCbvjhj2G2izCmgsTrey83dTtH1/bUP6CRlYW66camuAKHVq It3LkZR8gadGIsCgnJMSAFMkmGJDFha0yGYUPf2SdtBePMKnhamR8RSCvnegX9k+ 9y2fJbAVM2eVdnCTBUI/GR8f7LK/6Kf2SUxpyCgLKqqPyFFkBxjEu0U33URm62qm dKU/KvQP8MmdzE2T5b+A1Bi5a+UXrQH2 -----END CERTIFICATE-----Generated at Sun Jul 20 10:23:41 2025 by rpki-client